Configuration Guide

How to Configure SSL VPN Features

in DSR Series

Overview

This document describes how to configure D-Link DSR-500N to enable SSL VPN feature.
An SSL VPN is a form of VPN that can be used with a standard Web browser. SSL VPN doesnt
require the installation of specialized client software on end users computers, and is ideal
for applications including file sharing, remote backup and remote system management.
 How to Configure SSL VPN Features in DSR Series 2

Situation note
In this scenario, all application servers of headquarter are located in 192.168.10.0/24 subnet. We
are going to configure DSR router which allows remote PCs to access application servers via this
SSL VPN tunnel. This tunnel doesnt handle local Internet traffic of PCs in order to reduce traffic
overhead for the tunnel.

Roaming User
DSR-1000N
Firmware version
Internet WAN LAN 1.03B12_WW
192.168.10.1

Configuration Step
1. Before SSL configuration, please enable remote management feature via
Tools -> Admin -> Remote Management.

Make sure the Enable

Remote Management
option is enabled and
keep the Port Number
in 443.
 How to Configure SSL VPN Features in DSR Series 3

2. Go to SETUP -> VPN Settings -> SSL VPN server -> Portal Layouts
 How to Configure SSL VPN Features in DSR Series 4

Follow below parameter to add a portal layout.

Portal Layout Name: test
Portal Site Title (optional): test
Banner Title (optional): test
Display banner message on login page: Enabled
HTTP meta tags for cache control (recommended): Enabled
ActiveX Web cache cleaner: Enabled
VPN tunnel page: Enabled
Port Forwarding: Enabled
 How to Configure SSL VPN Features in DSR Series 5

The GUI page will look like above screenshot when you finish to add a portal layout.

3. Go to ADVANCED -> Users -> Domains, create a new Domain for SSL VPN users.
 How to Configure SSL VPN Features in DSR Series 6

Follow below parameters on Domains Configuration page.

Domain name: test, select portal: test

The GUI page will look like above screenshot when you finish to add a new domain.
 How to Configure SSL VPN Features in DSR Series 7

4. Go to ADVANCED -> Users -> Users, add a new user account for SSL VPN connection belong to the test domain.

Follow below parameters on Users Configuration page:

User Name: test1
First Name: test1
Last Name: test1
User Type: SSL VPN user
Password: <Here please input a password>
Confirm Password: <Here please input a same password again>
Idle Timeout: 30 Minutes
 How to Configure SSL VPN Features in DSR Series 8

The GUI page will look like above screenshot when you finish to add a new user belong to test domain.

5. Go to SETUP -> VPN Settings -> SSL VPN Client -> SSL VPN Client, in this page, administrator is able to
configure what IP address range, DNS information will be dispensed to SSL VPN clients .
 How to Configure SSL VPN Features in DSR Series 9

Follow below parameters to configure on SSL VPN Client page:

Enable Split Tunnel Support: Enabled
Client Address Range Begin: 192.168.251.1
Client Address Range end: 192.168.251.254
LCP Timeout: 60 Minutes

6. Go to SETUP -> VPN Settings -> SSL VPN Client -> Configured Client Routes to add a static route, since
we enabled the feature of Split Tunnel Support at previous step. Therefore, administrator is able to manually
alter the routing entries for each SSL user.
 How to Configure SSL VPN Features in DSR Series 10

Note: DSR router would

not allow you to add
Client Routes if you didnt
enable the Split Tunnel
Support at previous step.

Following parameters are routing information of remote network for SSL VPN client.
Destination Network: 192.168.10.0
Subnet Mask: 255.255.255.0
 How to Configure SSL VPN Features in DSR Series 11

7. Go to SETUP -> VPN Settings -> SSL VPN Server -> SSL VPN Policies, create a policy that allow the SSL VPN users
to access remote network.

Add a SSL VPN policy and follow below parameters on SSL VPN Policy Configuration Page.
Policy For: Global
Apply Policy to: All Addresses
Policy Name: Allow_all_address
Begin: 0
End: 65535
Service: All
Permission: Permit
 How to Configure SSL VPN Features in DSR Series 12

When you click save settings, a SSL VPN policy has been created like following screenshot.

8. Now, you have finished all settings in DSR routers. When you successfully connect to DSR router via SSL VPN \
tunnel, You can check that there will be two default gateway in your client PC.

For Internet traffic, it will be routed to 172.17.5.254.

For company network traffic, it will be routed to 192.168.251.1.
How to Configure SSL VPN Features in DSR Series 13
 Visit our website for more information
www.dlink.com
D-Link, D-Link logo, D-Link sub brand logos and D-Link product trademarks are trademarks or registered trademarks of D-Link Corporation and its subsidiaries.
All other third party marks mentioned herein are trademarks of the respective owners.

Copyright 2011 D-Link Corporation. All Rights Reserved.